
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier: Hk4iXyIfE3ImxKPELMSXXqDJU9NX0ANpseN4P2ggt2U=
Subject key identifier: 66:B5:7A:04:73:43:5B:D5:3E:10:55:86:41:4A:A3:D1:9B:3A:51:72
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number: 01A9
Signing time: Thu 23 Jul 2026 05:38:34 +0000
Manifest this update: Thu 23 Jul 2026 05:38:34 +0000
Manifest next update: Thu 30 Jul 2026 05:38:34 +0000
Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: sav9I+Y1NTdB0FAs9V/GtfTWtwlTjgoSjze3OCDH8go=)
2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Validity
Not Before: Jul 23 05:38:34 2026 GMT
Not After : Jul 30 05:38:34 2026 GMT
Subject: CN=6a61a8da-4a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:f5:d8:3c:16:ff:a5:cd:11:86:e0:21:3d:
ad:60:a9:34:42:63:18:ce:75:0f:c5:d9:1e:bc:16:
5f:18:0d:29:73:02:40:23:6e:dc:e3:b3:73:2e:a8:
0e:96:c7:c0:af:0c:6d:d4:c0:0c:8f:7f:0e:09:fa:
ff:b8:5f:bf:1c:a0:ce:e7:3b:c5:a8:a0:35:03:8e:
c0:f9:eb:d8:2a:9a:71:4a:99:6f:1c:47:e9:1d:51:
39:7c:6a:a2:5d:2b:b0:6f:6c:ad:7b:40:6b:62:dd:
dd:66:fa:5a:e1:26:6f:cd:88:7d:e3:2c:c4:5e:9f:
06:b4:13:37:52:76:4f:ac:dd:c9:b9:7b:30:c8:a9:
4f:c2:28:1b:96:0c:70:b2:ff:19:c3:f7:ad:ba:65:
97:11:2e:0a:6c:d2:78:f2:7b:ee:c4:55:ca:97:a6:
d7:4b:11:e1:31:6f:d7:cb:1f:56:fa:e7:1f:f5:a3:
fa:87:93:1c:de:55:ad:79:9d:8e:00:88:7b:e8:60:
60:69:c0:0e:1d:74:a6:f9:dd:2e:ae:c0:f1:1a:95:
6a:de:76:e8:66:e0:08:76:ed:5c:84:52:ff:14:60:
c5:3d:1e:0f:1e:4e:7f:8e:d6:94:2b:fa:a0:1c:3a:
04:2a:80:81:03:8d:8d:2b:e0:71:8c:24:91:64:6c:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:7A:04:73:43:5B:D5:3E:10:55:86:41:4A:A3:D1:9B:3A:51:72
X509v3 Authority Key Identifier:
keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f0:5d:42:a4:a2:eb:d5:62:26:8b:cd:ba:91:62:f9:22:ce:
68:38:70:8f:98:98:6d:c2:56:3c:7f:1a:4a:4e:39:c7:e5:74:
71:58:35:84:9d:70:74:69:4f:e3:37:30:a7:1b:2a:b5:8f:b5:
6d:66:9f:57:0c:ad:fd:d1:d2:8d:48:68:b2:35:f4:19:94:01:
fb:a7:11:39:f7:ef:38:64:6c:e2:5e:22:7c:81:5b:6a:f0:e0:
57:50:88:c1:44:20:ee:7b:32:37:1d:5b:e2:15:27:b1:be:c6:
33:8b:82:2e:30:47:80:25:ad:03:4c:7c:0b:5d:4e:94:a4:9f:
83:42:1a:8a:09:aa:93:b0:f9:96:5e:73:3b:8e:e5:bd:9e:c3:
7f:fc:6d:ba:04:3c:94:3d:84:14:0e:a0:40:a5:82:99:b5:f5:
20:23:4a:d1:60:2a:7c:ce:b2:f4:3a:65:73:8d:14:ef:db:2e:
2f:9c:56:67:65:a2:2e:3c:be:f7:be:9c:31:eb:01:22:52:9e:
71:9f:7a:8a:96:9e:b0:bc:25:42:11:3b:2b:5b:65:25:43:7e:
f1:19:c1:9e:af:3c:1b:cb:26:07:76:bb:44:9e:14:be:35:7d:
69:e5:5a:25:47:09:3d:d7:ec:08:ce:e6:7b:30:f5:2d:aa:8b:
a4:d6:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:07 2026 by rpki-client